$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa File: e820c2de-4153-3772-8779-b9ed95316688.roa (raw, json) Hash identifier: qtGDBwB0rfWM0HmYjVeVlbzGLFfUaP3CZnFbx88LOMY= Subject key identifier: 2E:2B:22:20:A3:CF:12:58:D4:87:0C:E6:6C:9D:CE:6A:8F:42:8C:31 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1000981E83127CBEE67D40 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 199.91.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:98:1e:83:12:7c:be:e6:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=7119b694-92b5-45b1-89f0-bbe0fb14ab77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:f2:84:6d:20:66:ef:34:e6:c0:37:55:ba: 22:77:a6:e5:f0:39:1a:98:06:5c:39:2e:0d:62:b5: 4e:c8:05:c8:00:e3:63:f1:8f:e5:43:bd:46:3e:a1: c5:01:66:38:75:cf:12:a0:11:fd:87:8c:1a:3a:98: 1e:22:57:1c:5c:d5:78:71:86:83:74:e4:be:98:45: 89:14:8f:f0:25:6c:42:bf:1a:f3:8b:99:d3:7e:d3: e4:b3:26:09:ba:02:74:ef:e9:dd:16:be:56:c5:8a: 54:18:03:a4:08:57:ce:af:f4:ca:27:72:8d:3a:d8: 13:c4:e9:75:2a:98:e6:47:a0:27:48:e7:93:b1:9b: ff:76:d0:04:29:08:ae:27:56:af:c2:52:e1:f7:21: 0c:96:54:7a:f3:fb:03:f7:ba:66:41:f5:04:84:53: b7:46:6e:4c:3c:ce:f4:6a:ac:b4:24:a4:6c:b3:db: f2:89:59:59:81:28:b2:17:39:17:8b:c1:8a:b3:e5: 79:e4:8a:7f:be:72:74:f5:7c:f4:af:79:86:03:2d: 11:e0:9a:b8:81:be:9d:e5:78:4a:d7:9b:3a:21:eb: 46:be:8d:f0:a1:d8:81:7e:e2:28:1e:4d:c4:77:94: 9e:28:f9:27:1b:c4:e0:22:55:c1:b4:58:27:24:27: 9a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2B:22:20:A3:CF:12:58:D4:87:0C:E6:6C:9D:CE:6A:8F:42:8C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a6:d5:68:90:c0:07:4a:b2:2b:55:e8:35:0f:49:44:a3:30: d9:7c:47:fd:51:e5:22:1f:ed:10:a5:78:ef:10:75:cc:12:1f: d3:f8:fa:91:cf:fe:55:6d:ef:69:07:73:3c:22:a3:2a:90:1f: e5:82:5c:64:71:00:8a:48:9f:4b:50:f4:85:1c:11:85:46:d5: c5:ef:cd:e3:50:80:92:ba:fa:a6:0d:ba:f5:a5:da:85:29:a8: d0:aa:64:3f:76:d7:c9:15:ac:a0:47:01:d4:f7:31:fd:52:93: 28:ef:f9:42:a9:4d:a7:88:fd:3d:f0:9a:53:29:bf:3f:9f:46: f1:c2:d4:75:88:d8:45:f9:db:f8:b7:c1:ca:d6:8f:bc:25:e6: 87:a5:7e:b4:d7:9b:66:75:66:9d:af:d6:4d:63:ff:66:a3:25: b5:d3:0c:ea:7e:09:b9:66:11:b4:4d:6a:94:6e:df:c9:60:8b: bb:f3:a5:01:67:f8:b2:10:f8:fc:b5:cf:e5:85:88:1e:40:0a: 0d:8b:f5:99:10:8c:6b:62:69:96:67:8e:f6:88:fd:07:97:2f: 2d:67:3d:ae:03:29:40:3a:d5:68:57:54:3f:46:22:88:5e:d9: a5:62:ba:e7:16:4b:23:e2:5e:1a:30:83:32:43:4c:1e:00:6d: e3:98:b8:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EACYHoMSfL7mfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NzExOWI2OTQtOTJiNS00NWIxLTg5ZjAtYmJlMGZiMTRhYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJbyhG0gZu805sA3Vboid6bl8DkamAZcOS4N YrVOyAXIAONj8Y/lQ71GPqHFAWY4dc8SoBH9h4waOpgeIlccXNV4cYaDdOS+mEWJ FI/wJWxCvxrzi5nTftPksyYJugJ07+ndFr5WxYpUGAOkCFfOr/TKJ3KNOtgTxOl1 KpjmR6AnSOeTsZv/dtAEKQiuJ1avwlLh9yEMllR68/sD97pmQfUEhFO3Rm5MPM70 aqy0JKRss9vyiVlZgSiyFzkXi8GKs+V55Ip/vnJ09Xz0r3mGAy0R4Jq4gb6d5XhK 15s6IetGvo3wodiBfuIoHk3Ed5SeKPknG8TgIlXBtFgnJCea0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4rIiCjzxJY1IcM5mydzmqPQowxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTgyMGMyZGUtNDE1My0z NzcyLTg3NzktYjllZDk1MzE2Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGem1WiQwAdKsitV6DUPSUSjMNl8R/1R5SIf7RCleO8QdcwSH9P4+pHP /lVt72kHczwioyqQH+WCXGRxAIpIn0tQ9IUcEYVG1cXvzeNQgJK6+qYNuvWl2oUp qNCqZD9218kVrKBHAdT3Mf1Skyjv+UKpTaeI/T3wmlMpvz+fRvHC1HWI2EX52/i3 wcrWj7wl5oelfrTXm2Z1Zp2v1k1j/2ajJbXTDOp+CblmEbRNapRu38lgi7vzpQFn +LIQ+Py1z+WFiB5ACg2L9ZkQjGtiaZZnjvaI/QeXLy1nPa4DKUA61WhXVD9GIohe 2aViuucWSyPiXhowgzJDTB4AbeOYuHQ= -----END CERTIFICATE-----Generated at Wed Jun 18 03:01:10 2025 by rpki-client